A company requires that all activity in its AWS account be logged using AWS CloudTrail.Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted.
How should the SysOps administrator meet these requirements?
Enable log file integrity validation. Use the AWS CLI to validate the log files.
Enable log file integrity validation. Use the AWS CloudTrail Processing Library to validate the log files.
Use CloudTrail Insights to monitor the log files for modifications.
Use Amazon CloudWatch Logs to monitor the log files for modifications.
If I’m not mistaken, the answer is:
Enable log file integrity validation. Use the AWS CLI to validate the log files.
I conclude that the answer is:
Enable log file integrity validation. Use the AWS CLI to validate the log files.